What is at the bottom of my page.

tylerr82 · **Joined:** Tue May 01, 2012 2:37 am **Posts:** 16

I am helping out with a site for friends and I am new to CMS made simple. This ":$cached=discount viagra soft" comes up at the bottom of every single page. How do I get rid of this? What kind of glitch is this? http://www.germanhausbarn.com/cms/ Is the site if you want to look at the source code. Thanks for the help

Dr.CSS · **Posted:** Tue May 01, 2012 4:46 am

Looks like some one was able to get into the root and add it to the index.php...

staartmees · **Joined:** Wed Mar 19, 2008 4:54 pm **Posts:** 461

first: replace the index.php with a orginal index.php
second: look for some unusual filenames and remove them
third: clear the sitecache

tylerr82 · **Joined:** Tue May 01, 2012 2:37 am **Posts:** 16

Is there any way to do this inside cms? I currently do not have access to the hosting in go daddy. If I did get access, how would I replace the file, I know nothing about this program. Thank you for all the help.

staartmees · **Joined:** Wed Mar 19, 2008 4:54 pm **Posts:** 461

yeah right Godaddy ::)

nope you must have ftp-access or access to the filesystem.

tylerr82 · **Joined:** Tue May 01, 2012 2:37 am **Posts:** 16

I would understand if this was a link, but what is the point of someone breaking in to add this?

Rolf · **Posted:** Thu May 03, 2012 2:44 pm

tylerr82 wrote:

I would understand if this was a link, but what is the point of someone breaking in to add this?

You will know for sure when you check the content of the index.php file...

tylerr82 · **Joined:** Tue May 01, 2012 2:37 am **Posts:** 16

Dr. CSS pointed out in another thread how to get access to the root. I can now see my index page and I looked at the source code and it looks the same. It is on every single page so why would the index page make the difference? I am still a novice so if it is a dumb question I apologize.

Jo Morg · **Joined:** Mon Jan 29, 2007 4:47 pm **Posts:** 403

tylerr82 wrote:

Dr. CSS pointed out in another thread how to get access to the root. I can now see my index page and I looked at the source code and it looks the same. It is on every single page so why would the index page make the difference? I am still a novice so if it is a dumb question I apologize.

Yeah, it does make a difference as index.php IS the entry point to all CMSMS sites. That basically means that whatever may be at the end of this file (or anywhere else if the hacker knows what he is doing) will be present on ALL pages....
Most hackers, knowing this attack all index.* files.

tylerr82 · **Joined:** Tue May 01, 2012 2:37 am **Posts:** 16

I looked at the index file in the root, and the code is the exact same. Would the index page in here look any different then the index page that would show up in the actual hosting account?

Dr.CSS · **Posted:** Fri May 04, 2012 2:10 am

CMS Made Simple using index.php in the [root] to pull the parts of a page together into the pages you see in the front end, if you were to hack it and put HELLO WORLD at the bottom of it every page would show HELLO WORLD just as your site shows that bit of text at the bottom...

tylerr82 · **Joined:** Tue May 01, 2012 2:37 am **Posts:** 16

If I posted the source code from the index.php do you think you would be able to tell me what I need to remove? I am used to all text being in tags and there are no tags around that phrase.

staartmees · **Joined:** Wed Mar 19, 2008 4:54 pm **Posts:** 461

see when your index.php has been changed and look for files and maps that have been changed/created on the same date. Don't start messing around in your index.php, just upload the original index.php.

tylerr82 · **Joined:** Tue May 01, 2012 2:37 am **Posts:** 16

The problem I have is I have none of the original files, I didn't make the site. Is there a way to create the file again and upload it?

staartmees · **Joined:** Wed Mar 19, 2008 4:54 pm **Posts:** 461

You can download these files form http://www.cmsmadesimple.org

What is at the bottom of my page.

Who is online